Security Advisory

CVE-2023-1381

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-10 14:14:39

Last updated 2025-02-11 17:21:25

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the image files, leading to a PHAR deserialization vulnerability. Furthermore, the plugin contains a gadget chain which may be used in certain configurations to achieve remote code execution.

← Browse all CVEs View on cve.org ↗